Secret Detection

eilonh/s3crets_scanner

Automated scanner that hunts for secrets (API keys, credentials) accidentally uploaded to public S3 buckets, using truffleHog3 for detection and…

c0axx/canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

nheiniger/snaffpoint

A tool for pointesters to find candies in SharePoint

josehelps/git-wild-hunt

A tool to hunt for credentials in github wild AKA git*hunt

gradiant/faro

FARO - Document Sensitivity Detector

michenriksen/gitrob

Reconnaissance tool for GitHub organizations

gitlab-com/gl-security/security-operations/redteam/redteam-public/tools/gitrob

This is a mirror of a forked repository. It adds several features to gitrob including GitLab support, commit content searching, in-memory repository…

h33tlit/secret-regex-list

List of regex for scraping secret API keys and juicy information.

liamg/dismember

:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

bugbounty-site/gitsecure

Detect exposed API keys on GitHub commits.

h33tlit/jbin-website-secret-scraper

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and…

sdushantha/dora

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

stelligent/cfn_nag

Linting tool for CloudFormation templates

daffainfo/git-secret

Go scripts for finding sensitive data like API key / some keywords in the github repository

sepehrdaddev/zap-scripts

Zed Attack Proxy Scripts for finding CVEs and Secrets.

ghostpack/deeppass

Hunting for passwords with deep learning